Authentication plug should be improved

[rbao]

Right now endpoints that do not require authentication can be specified by passing an array of path to the plug, this should be improved so that instead of passing path we should pass in both http method and the path.