Regression test all endpoints for authentication

[Justin Cummins]

It would be fantastic to have a test ensuring all API endpoints use an @Auth parameter OR explicitly mark unauthenticated access (annotation?).

[Alok Menghrajani]

Explicit marking works too.