Add auth check for destination and stats page.