introducing authroutes, passing in current auth as argument
tweaks