fixing routes so login works from root