What's the best way to enforce a user to be signed-in for certain routes? - Better Auth