(refactor) authFactory now uses serverRoutes