added /auth/failure route