The REST server attempts to deserialize byte streams with mime type of application/x-java-serialized-object and store the deserialized object. This can lead to ClassNotFoundExceptions.

Should instead attempt to store this as bytes and pass back accordingly. If, however, an object already exists on the server side as an object, it should be maintained on the server side in its deserialized form.