Authorization and access_token for all endpoints

Made the Authorization header and access_token query parameter show for all
endpoints.

They where added to the global *common definition, however, it seems securedBy
should accomplish this. Need to investigate with api-console as to way
securedBy is not sufficient.