adds auth check route