added authentication for all the routes