fix auth routes