authorization enforced on webpages

internal/site/response/json.go

@@ -49,6 +49,10 @@ func (j jsonRes) JSON(body any) Response {
 	return j
 }
 
+func (j jsonRes) Body(body io.ReadCloser) Response {
+	return Body(body).wrap(j)
+}
+
 func (j jsonRes) Cookie(ck http.Cookie) Response {
 	return Cookie(ck).wrap(j)
 }