Fix in REST-API

- Authorization does not take part in the URL anymore.