What is the best approach when handling the protected and unprotected routes - Better Auth