protect Kaleidoscope Event with Passport bearer auth

app/controllers/hive/kaleidoscope.js

@@ -5,6 +5,7 @@
 'use strict';
 
 const express = require('express');
+const passport = require('passport');
 
 const { SiteController } = require('../../../lib/site-lib');
 
@@ -30,8 +31,16 @@ class HiveKaleidoscopeController extends SiteController {
       return next();
     });
 
-    router.post('/core/connect', this.postCoreNodeConnect.bind(this));
-    router.post('/event', this.postEvent.bind(this));
+    router.post(
+      '/core/connect',
+      this.postCoreNodeConnect.bind(this),
+    );
+
+    router.post(
+      '/event',
+      passport.authenticate('bearer', { session: false }),
+      this.postEvent.bind(this),
+    );
 
     router.get('/', this.getKaleidoscopeRoot.bind(this));