allow override for webapp to access standby server (POSTs are still disallowed, unless you do force)
allow groovy requests to standby server
demote CatalogDto "warning" to debug; we sometimes validly pass empty DTO's from rebind
This closes #253