Protected route guards by role Token refresh + silent re-auth on 401
Protected route guards by role
Token refresh + silent re-auth on 401