Client-side authentication with each call

Despite client-side wrappers shouldn't be used at all (#51), we can still add some more security by checking for authentication info comming from front-end with each request. The requested operation might either be PUBLIC (reading data from whitelisted tables) or would require some level of auth info (name+pass/key) being sent each time. 3rd party might try to hit exposed endpoints, but until they breach the login, they shouldn't be just able to do anything like they would be now.

However, this is more of a concept yet. I will have to think about it more. I don´t expect to implement this right away, but I wanted to have a memo.