introducing route security through auth enforcement
- redirecting user back to login if not authed on protected route
- storing user on GlobalCtrl for centralized access
- updating navbar with login/logout links