re did some routes and user auth