Removed insecure package. Added Before route hook to requireLogin