moving some common code into the base authenticated route