routing, layout fixes & default auth