adding model and auth api routes