added associations for auth and user
broken routes