Add rest security tests