add dynamic routes for auth statement