secured left-open routes; updated simple-auth to 0.7.1