[basex-talk] Database credentials not enforced over REST?