Add LoginRoute and AuthenticatedRoute

All of the protected parts of the application (which is, basically all
the routes, except login) should descend from AuthenticatedRoute.

The route's beforeModel() function checks if the current session is
authenticated or not. In case it's not, the user gets redirected to the
login page.