add baucis routes and clean up authentication