How to verify mobile-only route access when desktop link is hidden