Played with Routes and the authentication of API