using better-auth to protect the entire route - TanStack