I think we can use filtering (https://github.com/tmeasday/meteor-router#filtering) to handle this on any page we want to block unauthorized access.