fixing routing with auth