#167 add loginRequired option to routes