fixed basic auth for the rest API by adding a separate /rest url pattern