changed jwt authentication routes