Require basic authentication for all API endpoints
Allow email/password authentication for the users#current endpoint