Securing custom rest API endpoints with public access from PWA

Securing custom rest API endpoints with public access from PWA