added auth token function in routes.js