Support for authentication and authorization based on OIDC and OAUTH 2

[mcupak]

In practice, that should be as simple as including an (optional) authorization header.

[mcupak]

Subtasks:

• [ ] Add the header.
• [ ] Review security text in the README to make sure it's still applicable.