Fixes #5938: Some Candlepin routes need User authorization due to subscription manager GUI.

The following routes need to be accessible via User or Client authorization:

PUT /consumers/{consumer_uuid}/packages
POST /consumers/{consumer_uuid} (force regen of identity certificate)
GET /owners/{org_id}/servicelevels
PUT /hypervisors