Hi Zachary,
Thank you for your response.
The services are not in the root, they are in a folder. That folder is not secured as it will contain both secured and unsecured services. The folder is currently marked as "Public, available to everyone".
I am navigating to the rest service via a browser. I have the cache disabled on my browser, but I went ahead and took the actions to clear the cache anyhow. This did not change the situation.
I went ahead and restarted the services, but as suspected this did not change things either.
Thanks for your help.