restws security on the data domains, no more messy http configuration here