maintain list of open access routes, reroute to default when not logged in and on closed route, partail rename from login to auth
finish rename login to auth