Move authentication routes to their own file