Adding authentication logic to BaseRunner

I want to push this logic into the BaseRunner instead of the
controller as it provides an easier means for avoiding around filter
behavior.
Adding CitationsRunner authentication enforcement