slightly better routes + username shown in header when signed in