implement auth

ki/routes.py

@@ -124,10 +124,14 @@ def get_user_profile(user_id):
 @app.route("/users/<user_id>/profile", methods=["POST"])
 @token_auth
 def update_profile(user_id):
+    if g.user.id != int(user_id):
+        return make_response({}, 403)
+
     return update_profile_handler(int(user_id))
 
 
 @app.route("/skills")
+@token_auth
 def get_skills():
     return handle_completion_request(Skill, "skills")
 
@@ -139,6 +143,7 @@ def get_skill_icon(skill_id):
 
 
 @app.route("/languages")
+@token_auth
 def get_languages():
     return handle_completion_request(Language, "languages")