Feat : Prevent not authenticated users to access API, allow clients to access only some API and Admin to acess all API