protecting routes in database sessions

Original message was deleted