Add vendors Yaml, ProstoAuth. Check user permission for not GET http methods.