Add ROI HTTP endpoint for mask retrieval.  Resolves #43