make REST stuff be own middleware module; put it behind auth&auth like everything else
Merge pull request #203 from ryedin/master

make REST stuff be own middleware module; put it behind auth&auth like everything else