Fixed RestSignatureFilter so logged in users can ask the rest/ namespace for things.
Fixed security configs for the above.
Fixed library_ajax.js barcode fill down bug that didn't seem to get merged from a previous fix.