Add authentication to plan CRUD paths
Only a product's core team can edit plans