Restrict access to all get requests unless authorized