added/revised routes, changed authentication