Protect paths + find users