rm root routes
user can supply username and password in exchange for an auth token