Add auth_required decorator that allows multiple auth mechanisms