Draft(Do not merge!): Set up keycloak authentication

• restrict endpoint access to a privacy_user, details will be provided in a python test script
• do not merge yet, as there are still tests missing (and needs to be rebased onto set-up-mvc once the latter is merged itself)