model, auth and route improvements added