Require authentication in the services controller
Keep a log of what's happening in the form of events