add security module and change rest default media type
is application/json