verify user at each route change
Merge pull request #6 from johndill/fix-auth

verify user at each route change