Guarding protected routes and redirecting to login if not authenticated. Added and fixed tests for new code.

Pruned comments

Better spec intent in descriptions