add redis to store auth state and change /auth route to validate token against token stored if login was successful