(fix) removed login route from auth (one exists in app.js)