Make a custom decorator for auth, so we allow both headers as well as parameters for auth, as well as a fast way for disabling, when in developer mode