added authenticated and unauthenticated root routes