Require access token in secure get and delete