Hi Chris,
Check out Restify for a API-specific HTTP service module.
People use REST and RESTful in varying degrees of ‘RESTness’, I am not quite sure which degree you are coming from. Read this interesting article, “Your API is not RESTful“, to get the context.
Implementing a truly and wholly RESTful API in any platform is going to be a substantial effort. However, resourceful routing (Chapter 3, page 73) is very REST-like. You can secure it by the use of session or API token, depending on the nature of your client.
All the best!
Yaapa