restructed rest classes, added security domains (@RolesAllowed not working, but read/write access regulation is done in web.xml)