When I am reading about REST and session management/authorization a lot people suggest OAuth. For me it is a conflictive thought, because I thought OAuth is just for giving third parties authorization about something. So why use it for my own client to access my rest service? Do I think wrong about it?