add options.auth for routes and tests