Namespaced the routing
Added a group filter to allow only access to specific groups
Added a loggedIn check in authenticate, just in case.