changing routes

making group that need authentication in routes file