Feature/issue 199/protect routing with role

[lcaohoanq]

• In this PR, i have create a protectRouter is a global router will call first in every request, i have divide two case we need to protect route

  • Request do not require contain access_token: /user/login, /user/register -> Will add to the openRoutes and continue to send normally
  • Request require contain access_token: verifyOtp, updateMe,...
    • In this case, i will take the access_token, decoded and take the role data, in current, we have 3 role with enum value: Admin: 0, Customer: 1, Employee: 2,

• Refactored some stuffs relate my task