prevent unauthorized access to questions route