[Improvement] Put authentication route under endpoints needing a user token

[fehho]

Current behavior is to run a subroutine inside every endpoint needing authentication, adding noise and gives the potential to forget/remove authentication from a protected endpoint.

[fehho]

https://metacpan.org/pod/Mojolicious::Plugin::OpenAPI::Security