update auth route logic