added authentication for routes