Add org.geonode.security to the verbose logging properties and update the rest properties to allow GET requests.