|#964||Changing access-mode for REST APIs to be isAuthenticated instead of permitAll to force authentication|