fixed RestAuthFilter to only intercept API urls
added support for custom API resources