Protecting APIs and pages

Being written

This page is being written. The Chinese version is complete.

Require sign-in on an endpoint, read the current user, declare page access modes, and tell authentication from authorization.