Implemented auth on all routes that touch BGG.