adding authentication route