Add authenticate()s to all routes.
Bug fixes.