Where am I protecting routes with tokens in this article?

Can someone show me how he is protecting any routes in this article? I have tried to follow it but can make posts regardless if I’m signed in or not.