added a post login route and a secured get route