stored init route params into session
renamed root to list
working on authentication, not working as of now