added login protection / exclusion for routes
Google authentication is working. Refresh is working.