Merge pull request #177 from dfcoffin/master

Issue #176 - Added test to ensure browser cannot access resource APIs