Protect all CRUDL APIs with oauth2_resoure firewall.