remove auth from serverside
add in mappers and fix auth route
update flow for auth