We need to add authentication decorators to all the functions that will require either a key or admin rights. See the api.py file in otw_core `@shareddefs.api_token_required`