move local-link into protected routes