[#8450] do oauth check for all /rest/ paths, and simplify normal request auth methods
6 files changed