add submit form, routes, user auth