Properly authenticate endpoints

[rynoV]

• RecipEase/Server/Controllers/RecipeRatingController.cs

  Line 97 in 63fafb0

  public async Task<ActionResult<ApiRecipeRating>> PostRecipeRating(ApiRecipeRating apiRecipeRating)

• RecipEase/Server/Controllers/RecipeRatingController.cs

  Line 140 in 63fafb0

  public async Task<IActionResult> PutRecipeRating(string userId, int RecipeId, ApiRecipeRating apiObj)

• RecipEase/Server/Controllers/RecipeRatingController.cs

  Line 188 in 63fafb0

  public async Task<IActionResult> DeleteRecipeRating(ApiRecipeRating apiObj)

There's most likely more than this, we need to go through and check.

[sm20]

If this related to fulfilling the constraint: The user making the request should be the authenticated user?

If that is the case, I skimped on the authentication intentionally because I don't see it being something rigourously tested for in our demo (via postman). Also from the perspective of the average user of our app (so, assuming there are no adversaries trying to attack our app), only the user that is logged in can CRUD their own rating.

If you deem that authentication is still required, then I could implement it.