Require valid OAuth token for admin endpoints