added player auth routes