added routes for authentication, function to check credentials is still not implemented