Add auth wrappers around routes and links…

…although there’s no way to log in yet!