change auth routes; add route filters; remember last url and redir on login