Add: Authorization Only `Super User` can update a feature-flag

### Issue Description
Anyone can update any feature flag for now, but we want to restrict it to only super users. We will want to add an authorization layer where it checks for the user role and if a user is not `super_user` then return a `401 Unauthorized`.
