Require login on routes, REST API start using IR