adding auth route