Mark ``GET /rooms/{roomId}/members`` as requiring authentication