/auth should be /login and show notif for when user needs to refresh auth