Adding login_required decorator to protect routes