added app route, app controllers, and started auth strategy
shuffled some folders around