Added authentication to all API routes