In which package must a custom REST endpoint be placed to make it accessible via HTTP basic authentication? Choose 1 answer.