api auth, routing modified