Add security middleware

[lvaldovinos]

• Check that only valid tokens can access to private resources

Protected resource/method
/users
Private : GET, PUT, DELETE
Public : POST

if invalid token return 401 eg.
{"code":401,"status":"error","message":"token is invalid","data":"UnauthorizedException"}