Maybe a simple issue maybe not? Still important because the middleware checks protected routes. Maybe its something with `href`?