Make sure the user is logged in before accessing routes

[avenmia]

When the user accesses a webpage there should be a check to verify the user is logged in. If the user is not logged in, the page should either redirect them to the home page or display an unauthorized page (when accessed with a browser - probably can look at Accept header to determine this).

Acceptance criteria:

• Log out or remove all cookies for HIERR site
• Access /zipcode (and /survey and all other endpoints meant to be viewed with a browser)
• Verify that 302 response is sent with a Location header of / (home page)