[Authorize]
public class TriviaController : ApiController
{
    ...
}