Add auth routes and implementation