Authenticate workout actions except leaderboard