added /api prefix for authentication controllers routes