fix(monitoring): add specific paths to Enforced map (#247)

The m-lab/access v0.0.11+ TokenController uses exact path matching for
the Enforced paths, not prefix matching. This caused 400 errors on
/v2/platform/monitoring/{ndt/ndt7,wehe/replay} endpoints because only
'/v2/platform/monitoring/' was in the Enforced map.

Add the specific monitoring paths that are actually used.

Author: robertodauria

locate.go

@@ -242,8 +242,11 @@ func main() {
 
 	// The /v2/platform/monitoring endpoint requires a token that is only
 	// available to the monitoring tools. TokenController validates this token.
+	// TODO: update m-lab/access to support prefix matching, then simplify to
+	// just "/v2/platform/monitoring/".
 	tc, err := controller.NewTokenController(verifier, true, exp, controller.Paths{
-		"/v2/platform/monitoring/": true,
+		"/v2/platform/monitoring/ndt/ndt7":    true,
+		"/v2/platform/monitoring/wehe/replay": true,
 	})
 	rtx.Must(err, "Failed to create token controller")
 	monitoringChain := alice.New(tc.Limit).Then(http.HandlerFunc(c.Monitoring))