enforce authentication for getMenus service