(feat) add token authentication for each page

Users who are NOT logged in can only view pages that use the AuthController: the login and logout pages.

Users MUST have a JWT to be able to view the other pages.