rest: don't modify server_auth method. Create own method for password management auth. This way we can avoid some potential bug.
web: fix typo