I have a .net 4.6 app that is using active directory but atm everyone has full access to all routes. What is the best way to lock certain routes behind user roles and how do I only show links in the default layout based on user role? Thanks.