How am I supposed to add custom api endpoints which are only accessible after signin. ```python # TODO: Add APIs @app.post("/test") async def test(): return {'status': 'success'} ```(codebase python fastapi) In this example the endpoint is also accessible before signin.