fixed missing auth checking in some api resources
Merge pull request #294 from teharrison/develop

fixed missing auth checking in some api resources