[keycloak-user] Securing GET/POST/DELETE in different way