Adding route-level auth.