Change routes that require authentication [SH-7114]

- All routes except signin, signup, and
  forgotpassword require authentication
Clarify put requests for updating a user [SH-7114]