basic functioning everyauth with two JSON routes