added authentication check to api stamps controller