authentication route and apiAuth working