separated authentication code in auth.rb
added route /auth/failure