fix: require authorization for items list

api/src/Controllers/ItemsController.cs

@@ -15,13 +15,13 @@ public class ItemsController : ControllerBase {
         service_ = service;
     }
 
-    [AllowAnonymous] // accessible if not authorized
+    [[Authorize]]
     [HttpGet]
     public async Task<ActionResult<List<Item>>> getItems() {
         return Ok(await service_.GetAll());
     }
 
-    [AllowAnonymous]
+    [[Authorize]]
     [HttpGet("{id:int}")]
     public async Task<ActionResult<Item>> getItem(int id) {