need a route for the new auth call