Auth hook for Iron-Route