Fix permissions on tournaments endpoints

[myssto]

Fix [Authorize] tags on the tournaments controller so that they no longer require the "user" claim on every endpoint