Authentication and authorization

[Shumayl]

• Protect the /main route.
• All calls to model endpoint need to be done via protectedProcedure.
• New database field to check if user have access to app - handy for kicking off bad actors.
• Implement local rate limiting.