Just to keep it simple is that yes I want to lock the route that returns the image assets stored in the media library. The question is what is the best way to customize the Strapi Admin Tool to pass along the credentials in the header of the image requests.