Allow rest access without auth, fix response handling