Enforce authentication in the API

[EliuX]

As it was mentioned in our Slack channel, we should be able to enforce authentication to our API using JWT. Basically all we need for the JWT generation/verification/refreshment is

{
  "authority": "https://securityioet.b2clogin.com/securityioet.onmicrosoft.com/B2C_1_securityioetweb",
  "client_id": "b7e72a5b-c054-4bf8-99e7-f11bbf99a6b1",
  "scopes": ["https://securityioet.onmicrosoft.com/login"]
 }

TODO:
We need to make that only authenticated users can call the api

[EliuX]

One of the required JWT attributes to get for sure is the tenant_id.

[EliuX]

A new version was created with more details #94