removed auth from showOccupiedSpots route