authenticate the routes