moved /auth routes to authRouter