added more routing for auth