How to avoid RSSO from filtering REST requests