Updated routes.php so that all routes must be authenticated including to / with the exception of /login