Require authentication for all api endpoints