added routes and basic auth