fixed before auth routes