add routes for auth and secured url