changed auth routes to /auth/%action%