Fix authorization via REST