I do not want my app to be accessed at all unless the user has the allowed role so I have created roles in the static web app for a test users email using azure active directory. In addition, I have created the following route in the staticwebapp.config.json file in the root of the project :

{
    "routes": [
        {
            "route": "/",
            "allowedRoles": ["reader"]
        }
    ]
}

I have deployed my app with this new config file and yet I am still able to access the site as if there is not authentication running. Is there something additional I need to run to make this authentication pipeline work? Also, any way to redirect users to azure ad login if not logged in once I do get this working?