added promises on each route to ensure pages wont be loaded until auth is resolved