web: check authorization for all calls
web: check authorization for all calls

For each call, check that the logged in user has
proper authorization before allowing the call.

Signed-off-by: Ilija Hadzic <47a09d4a4430975766160361f65fc72633be50b6@gmail.com>

ihadzic/jim,ihadzic/jim,ihadzic/jim