Update routes.rb for authenticated