[keycloak-user] Allow access to REST without authorisation