#28 #31 overall improvement in authentication for rest endpoints