removed unneeded return statements
Added authentication check for each api route
Fixed capitalization of route file names
Started on rewards models and api routes