Fix EZP-21176: Prevent REST hrefs without prefixes in payloads

For some reason, we had ended up accepting hrefs without the prefix in payloads.

This "feature" (that wasn't meant to be) has been removed, and all tests updated.