refactoring auth routes
more refactoring
pending users api tests cause using passport for now