added auth routes