Require API authentication for all methods by default