fixed routes and blocked homepage without auth.temp