change routes to match auth regex