Implement authentication middleware and authorization rules

[rakesh740]

add auth middleware to API authenticate and check authorization for handlers

[rakesh740]

in progress