Authenticate change stream requests