User & admin authenication before /retreats page is rendered.