add route event to check if not authenticated, then go to auth page