Update routes.rb

Don't actually need to post to auth