added route protection to rooms controller and refactored route protection in reservations controller