protecting routes in database sessions - Theo's Typesafe Cult