Bug 922166 - add protected search route that surfaces 'unpublished' make...

...s. A valid Hawk Authentication header must be supplied to use the route.