DML operations on REST api now with Basic HTTP Auth
POST/DELETE are secured, but GET is possible without authentication