Move auth requirements into the router definition.