Update rest.properties

opening another specific endpoint. Looks like when we open the endpoint to anonymous, admin & authenticated users can't see the items!