Protected routes, preventing direct access via url.