Fixed paths.
Fixed paths.
Added basic JWT auth.
Restrict auth to put.