updated routes, models, and auth

damn!!! no automerge