added default route
added authentication