I worked this out - seems I had to add the web guard to the route group like so:
Route::group(['middleware' => ['web', 'auth']], function(){
Route::get('/importer', '\Vendor\Package\Controllers\ImporterController@index');
Route::post('/importer/import', '\Vendor\Package\Controllers\ImporterController@import');
});