Revert "allow downloading job candidate resume by direct link without token"

This reverts commit d3ae667.

Author: maxceem

src/routes/JobCandidateRoutes.js

@@ -47,13 +47,9 @@ module.exports = {
   '/jobCandidates/:id/resume': {
     get: {
       controller: 'JobCandidateController',
-      method: 'downloadJobCandidateResume'
-      // TODO: we have to protect this endpoint somehow
-      //       but at the moment in the client app we are clicking this link
-      //       as a regular download link and we cannot pass JWT token to it
-      //       how to deal with it?
-      // auth: 'jwt',
-      // scopes: [constants.Scopes.READ_JOB_CANDIDATE, constants.Scopes.ALL_JOB_CANDIDATE]
+      method: 'downloadJobCandidateResume',
+      auth: 'jwt',
+      scopes: [constants.Scopes.READ_JOB_CANDIDATE, constants.Scopes.ALL_JOB_CANDIDATE]
     }
   }
 }