added routes into group for auth