Authentication added, TODO routes