add auth/session support and better route regstiration