Add simple authentication or domain whitelist to the API endpoint

Acceptance criteria

• [x] #2097
• [ ] You need some kind of authentication to use the API
• [ ] TransDim is updated to support it