Add authentication
Update routes and make them a bit more specific in their GET/POST acceptance