Making sure that rest endpoints registered by a site is only reachable through that site
Removed the security modules since as of recently, sites can easily overwrite the default security policy anyways
Minor upgrades of the felix binary (4.2.1) and dependencies
Merge remote-tracking branch 'origin/r/3.1.x' into r/3.1.x
Revert "Temporary update for searchRequest to make movie fundable (videolounge)."

This reverts commit 2d43f2be54047dd756b3e47dd833b4fd9db71278.