Don't set authorization by default

Otherwise we will not be able to access the STAC controllers. The
authorization must be be updated at a later date anyway, so we
check it again then.

src/GeoCop.Api/Controllers/DeliveryController.cs

@@ -2,6 +2,7 @@
 using GeoCop.Api.Contracts;
 using GeoCop.Api.Models;
 using GeoCop.Api.Validation;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 
@@ -11,6 +12,7 @@ namespace GeoCop.Api.Controllers
     /// Controller for declaring deliveries.
     /// </summary>
     [ApiController]
+    [Authorize]
     [Route("api/v{version:apiVersion}/[controller]")]
     public class DeliveryController : ControllerBase
     {

src/GeoCop.Api/Program.cs

@@ -31,10 +31,6 @@
 builder.Services
     .AddControllers(options =>
     {
-        var policy = new AuthorizationPolicyBuilder()
-            .RequireAuthenticatedUser()
-            .Build();
-        options.Filters.Add(new AuthorizeFilter(policy));
     })
     .AddJsonOptions(options =>
     {