routes
auth fix js