diff --git a/apps/backend/src/app.ts b/apps/backend/src/app.ts
index 9026fcd4..8c6b5304 100644
--- a/apps/backend/src/app.ts
+++ b/apps/backend/src/app.ts
@@ -10,13 +10,17 @@ const port = process.env.PORT || 8080
 
 app.use(express.json())
 app.use(morgan(':method :url :status :response-time ms'))
+
+// Public routes
 app.get('/', (req, res) => res.json('Welcome to Mixan'))
-app.use(authMiddleware)
-app.use('/api/sdk', events)
-app.use('/api/sdk', profiles)
 if (process.env.SETUP) {
   app.use('/setup', setup)
 }
+
+// Protected routes
+app.use(authMiddleware)
+app.use('/api/sdk', events)
+app.use('/api/sdk', profiles)
 app.listen(port, () => {
   console.log(`Listening on port ${port}...`)
 })