added auth_root to routes.rb for logged in users