Require login for all protected controllers.