add auth route