changed authentication route to match RESTFUL design