redirect to root unless logged in
(m) adjust routes organization