Disallow all non-public api routes for unauthorized users

[BioBoost]

At the moment a lot of routes are still available which should not be publicly exposed. For examples GET /sensors. These should be protected.