Filter out extras... keep only core ReST API server codes...
Top level controller functions only accessible by admins...

- code cleanup
Added a bash shell script to test the API in debug mode...

- using curl, no encryption (tests in debug mode only!)