Use oauth to guard POST /answers