Add authorization for internal Engine API endpoints
For instance internal endpoints should only be accessible with valid authorization.
As a consequence they can be exposed on AURA_HOST
via Nginx.
Details to be specified.
Edited by David Trattnig