almost got auth working, routes broke down