reintroduce RestAuthSpec going against jax-rs demo