Used to protect an API endpoint that requires the user to be logged in.
API Request object
API Response object
Either the user, or false (unable to authenticate)
Used to protect an API endpoint that requires the user to be logged in.