updated authentication routing