generalize securing all of BottlEndpoint methods - user has to be logged in to get/insert/update/delete bottl