Authenticate user on all requests