routes renders and authentication