API Authentication

[ascariandrea]

API - and admin - need to be authenticated.

I would use a jwt strategy and add the authentication layer to all the Create/Update/Delete endpoints of API, leaving Read endpoints public.

To achieve this we need a new table in DB for admins that stores:

• first name
• last name
• email
• password

And they can login from admin-web services to access the admin dashboard