root to /habits and protect routes from unauthorized users

Fixes #61