Modified route logic, added authentication layer as well