change rest unit tests
move security config
update php api