Add /auth/dongs/:id GET + PUT + DELETE authenticated API