add new routes + login + controllers