fixed dev mode security of maven2 and rest URIs + added missing security on eap config files (rest and maven2)