The right way.

auth.clj

;; ...

(defn- lock [handler]
  (friend/requires-scheme handler :https {:http 3333 
                                          :https 3334}))

(defroutes sensitive-routes
  (GET "/register" []
       (layout/render "auth/register.html"))
  
  (GET "/login" []
       (layout/render "auth/login.html"))
  
  (POST "/login" [email pass]
        (login email pass))
  
  (POST "/register" [email pass pass1]
        (register email pass pass1)))

(defroutes auth-routes
  (GET "/logout" []
       (logout))
  
  (POST "/logout" []
        (logout))
  
  (lock sensitive-routes))


;; ==============================
;; and in handler.clj:

(defroutes
  app-routes
  (route/resources "/")
  (route/not-found "Not Found")) ; TODO: make this its own page

(def all-routes [cljs-routes home-routes 
                 error-routes auth-routes app-routes])

(def app
  (middleware/app-handler all-routes 
                          :access-rules []))