Describe approaches for implementing authentication and authorization mechanisms in a RESTful API, such as token-based authentication and role-based access control (RBAC).