protected routes and unprotected routes - create JWT

[isnotafunction]

that depend on the user having a cookie or not (or what level of access they have).

[helenzhou6]

-- What happens if tries to reach when not have cookie - redirect to page saying NO