if your choice of api route directly affects your auth flow something is very wrong.