add secure routes and markup based on auth & route