What i am trying to achieve is to allow GET\'s with a simple apiKey, but require a JWT token based on an authenticated user to POST/UPDATE/DELETE.
I was thinking somethin