Add token handling to data sankey endpoint

[maxsibilla]

Currently the data sankey endpoint does not require a token and returns information for non-published entities. We want to change this to support a logged in/out response so that a token will be required to view all entities (e.g. on the Data Ingest Board) and will return only published entities without a token (e.g. on the documentation website).