minor ui changes and route protection for private $states