auth now carries over to / route