Pprof endpoint (#1474)

Fix two issues:
- We want to expose goroutine stack traces endpoint too
- Protect pprof using authentication to prevent security issues

Author: jakozaur

platform/ui/console_routes.go

@@ -67,8 +67,6 @@ func (qmc *QuesmaManagementConsole) createRouting() *mux.Router {
 	router.HandleFunc(healthPath, qmc.checkHealth)
 	router.Handle(metricsPath, promhttp.Handler())
 
-	qmc.initPprof(router)
-
 	// just for oauth compliance
 	router.HandleFunc("/auth/{provider}", gothic.BeginAuthHandler)
 	router.HandleFunc("/auth/{provider}/callback", authCallbackHandler)
@@ -86,6 +84,8 @@ func (qmc *QuesmaManagementConsole) createRouting() *mux.Router {
 		authenticatedRoutes.Use(authMiddleware)
 	}
 
+	qmc.initPprof(authenticatedRoutes)
+
 	authenticatedRoutes.HandleFunc("/", func(writer http.ResponseWriter, req *http.Request) {
 		buf := qmc.generateDashboard()
 		_, _ = writer.Write(buf)
@@ -317,6 +317,7 @@ func (qmc *QuesmaManagementConsole) initPprof(router *mux.Router) {
 	router.HandleFunc("/debug/pprof/allocs", pprof.Handler("allocs").ServeHTTP)
 	router.HandleFunc("/debug/pprof/symbol", pprof.Symbol)
 	router.HandleFunc("/debug/pprof/trace", pprof.Trace)
+	router.HandleFunc("/debug/pprof/goroutine", pprof.Handler("goroutine").ServeHTTP)
 }
 
 // Here we generate keys for the session store.