[update] using dynamic rest handlers. second_password renamed to internal_password. other improvements.