Sveltekit protected routes question - Supabase