Added simple authorization. Denied user access to add unit if he hasn't ...

...access token