remove login-check from route permission protector