Bindle server should require an explicit flag to start without write auth

[simongdavies]

Currently if I run bindle-server the write endpoints are unauthenticated, this should require explicit configuration