add routes for oauth authentication