User authentication by authToken header, allow to skip authentication on controller or specific action