moved middleware into /routes
separated user routes
separated shop routes
separated verify and site routes
password change shows confirmation

no more redirect to main page