Apart from backend, authentication check has to be implemented on frontend too, to restrict some parts of the app.