Fix stuff I broke when refactoring API paths + re-add authentication on
entity creation API