added authentication and authorization

Placed the routing rules for authentication and authorization