+all routes auth
+ignore
fix login bug