Attach ensureAuthorized to all declared routes and make public the default user role.