Protect all routes. This could be implemented in better way, but should work