Split API into multiple files & setup public user permissions

app/routing/middleware/auth/ApiRoute.middleware.js

@@ -15,9 +15,9 @@ class ApiRoute extends Middleware {
             req.user = await PublicUser.get_for_request(req)
             return next()
         } else {
-            // If not signed in, save the target url so we can redirect back here after auth
-            req.session.auth.flow = req.originalUrl
-            return res.redirect('/auth/login')
+            return res.status(401)
+                .message('API authentication required')
+                .api()
         }
     }
 }