fix: authorize every connection-scoped endpoint (116 were unguarded)

fix: authorize every connection-scoped endpoint (116 were unguarded) #274