get and post enabled for REST API