hacked around authenticated routes.
user has many checkins
authenticated / noauthenticated