added some changes
added route authentication