Checklist for new routes

• Is the route documented with @ApiOperation?
• Are the correct methods selected in @RequestMapping?
• Is the route added to SwaggerConfig regex?
• Do we need PreAuthorize oder Elide permission checks? OAuth scope required?
• If elide permissions: Is there @Audit logging?
• Are there all required integration tests? (succes, fail with scope, fail with auth, fail with validations)