user profile routes and authentication check