Add an initial implementation of protected routes and API resources