protected route placeholder for future SSO integration