REST: implement /newgrant request.