auth requires email
udpate search route and test