removed route nesting. prepared authentication