So I removed auth for the main page you login at and the links to tags. Everything else will require login. I think this was a great idea, I've been in my own bubble and yes, not everyone is just gonna login.

I think I can safely setup all the routes as unauthenticated except for the post pages (where you can comment) and create post pages pretty quickly.