add auth to games routes