add security config for rest agreements
<intercept-url pattern="/rest/users/email" access="isAuthenticated()"/>
<intercept-url pattern="/rest/users/settings" access="isAuthenticated()"/>
<intercept-url pattern="/rest/needs/drafts/*" access="hasRole('ROLE_ACCOUNT')"/>
- <intercept-url pattern="/rest/**" access="isAuthenticated()"/>
+ <intercept-url pattern="/rest/agreement" access="isAuthenticated()"/>
+ <intercept-url pattern="/rest/**" access="permitAll()"/>
<intercept-url pattern="/**" requires-channel="https"/>
<!--intercept-url pattern="/rest/**" access="isAuthenticated()" /-->
<!--
