added authentication to routing