Add missing routes after taking out the security risk catch all
Allow users to log in and out