Auth hook for Iron-router