- fix REST returning Unauthorized if you are logged in using impersonation (fixes #723)