fixed auth routes for login to work