adding route for Kyle's iPhone POST and set up auth to be relative