.ensureAuthenticated can now be safely applied globally