ACT-1916: Double-check all REST-resources for explicit authenticate()