Fix most glaring bugs and vulnerabilities

express/routes/api/v1/system.js

@@ -4,12 +4,18 @@ const {
   listDictionaries,
   syncDictionary
 } = require('../../../controllers/api/v1/inter_instance_sync')
+const user = require('../../../middleware/user')
 
 // Receive Content Security Policy violation reports.
 router.post('/csp-reports', system.handleCspReports)
 
 // Trigger synchronization with Eurotermbank.
-router.get('/eurotermbank-sync-push', system.syncWithEurotermbank)
+router.get(
+  '/eurotermbank-sync-push',
+  user.isAuthenticated,
+  user.isPortalAdmin,
+  system.syncWithEurotermbank
+)
 
 // List dictionaries (one page).
 router.get('/inter-instance-sync/dictionaries', listDictionaries)