add form

fixed auth routes