add auth module
add nested route