Add ability to mark routes as must be authorized

TODO - Add the returnUrl parameter to backend to redirect to the appropriate url