auth.js - /user/auth -> /auth