everything not forced xhr so adding login route