Lock down routes to prevent access from unauthenticated users. Also lock down routes to keep one user from accessing another user's library information.