Statum guards redirect a page before its content renders. To protect a page,
add a guard link to its <head> — unauthenticated visitors are sent to
/login before the entrypoint is even fetched, and re-checked on every
evaluate cycle (e.g. after logging out):
<link rel="stm-guard" require="auth" href="/login" pre-entrypoint>