Add an auth mechanism

Only people with valid membership must be able to call the `forward` endpoint into the API.
We need to prevent people to use the service only with the CLI, bypassing our NFT validity process on the blockchain.

ideas: JWT bearer token auth based / Wallet signature