Secures get all hunts by admin role

src/main/kotlin/net/halfbinary/scavengerhuntapi/controller/HuntController.kt

@@ -10,6 +10,7 @@ import net.halfbinary.scavengerhuntapi.model.request.HuntStatus
 import net.halfbinary.scavengerhuntapi.model.response.HuntResponse
 import net.halfbinary.scavengerhuntapi.service.HuntService
 import org.springframework.http.ResponseEntity
+import org.springframework.security.access.prepost.PreAuthorize
 import org.springframework.web.bind.annotation.*
 
 @RestController
@@ -21,6 +22,7 @@ class HuntController(private val huntService: HuntService) {
         return ResponseEntity.ok(huntService.getHunt(huntId).toResponse())
     }
 
+    @PreAuthorize("hasRole('ADMIN')")
     @GetMapping()
     fun getAllHunts(@RequestParam status: HuntStatus?): ResponseEntity<List<HuntResponse>> {
         return ResponseEntity.ok(huntService.getAllHunts(status).map { it.toResponse() })