Guarding protected routes and redirecting to login if not authenticated....

... Added and fixed tests for new code.

Pruned comments

Better spec intent in descriptions