Exige token válido (middleware de auth: Authorization: Bearer <token>).
Authorization: Bearer <token>
final bool requiresAuth;