Restrict menu items based on Auth