routes modified for login/callback/failure