rest sso: use layouts