## ADDED Requirements

### Requirement: Protected routes require authentication
The system SHALL prevent unauthenticated users from accessing protected pages.

#### Scenario: Unauthenticated access attempt
- **WHEN** an unauthenticated user navigates to /projects
- **THEN** the system redirects to /login
- **AND** stores the intended destination for post-login redirect

#### Scenario: Authenticated access
- **WHEN** an authenticated user navigates to /projects
- **THEN** the route renders normally

### Requirement: Public routes are accessible
The system SHALL allow unauthenticated access to public pages.

#### Scenario: Login page
- **WHEN** an unauthenticated user navigates to /login
- **THEN** the login page renders without redirect

#### Scenario: Health/status pages
- **WHEN** any user navigates to /health
- **THEN** the page renders without authentication