Even if original path is as mentioned, it will still authenticate the request by sending credentials to http://localhost:8080/dsdataserver/dsl.svc/OW5000/1/OpenWorks-SRL_HOU_OWNEW_SALT3D/j_security_check. 

The last index is needed because we dont want action_url part to be appended to $metadata or any query option parameter in which the request fails. It also works with entitiesRequestResource url for e.g. /Basin/j_security_check