added App.route to all protected routes