removes unnecessary routes
adds authentication
design changes