moved and renamed recipe route and required login