add auth to routes, removed comments