Use authentication for maker's API calls

[klochowicz]

everything except /api/offers should not be accessible to the public.

Note: It doesn't matter that much as long we're only using it on regtest/testnet, but will be a blocker when going to mainnet.