Created attachment 791940 [details]
server.log

REST request without authentication throws NPE in business-central.
JBWEB000236: Servlet.service() for servlet javax.ws.rs.core.Application threw exception: java.lang.NullPointerException

I think it will be better if the application would react in a better way than NPE and server error 500. More meaningful exception could be thrown in server log and HTTP status 401 Unauthorized could be returned.

To reproduce:
1.) Download BPMS 6 ER2 and just run it with ./standalone.sh with default configuration. (Optionally you can add user guest, but the bug message remains the same.)
2.) Send a GET request to http://localhost:8080/business-central/rest/task/query?potentialOwner=guest&language=en-UK (for example using Firefox's RESTClient).