Add authentification for the idl api

Currently we allow everyone to query for permission groups. We want to migrate to a solutution that will need the idl api clients to provide a JWT, in order to allow those to query - and deny for others.

The token should be usable from both the frontend and the backend.