implemented checks to make sure that there is a token in sessionstorage.  we must do some middleware though on the express-server to make sure that the webserver is also secure