add tests
fix auth routes close #2
add correct route