login auth works. routes from login and register work