adding auth routes