fix: apply authorized email restriction to non-admin routes (#1778)

fix: apply authorized email restriction to non-admin routes (#1778) #1043