Set default permission class to IsAuthenticated