fix minor bug with auth routes