added security to rest endpoints