added indication of whether or not the route requires auth