Usually, the solution to this problem is to to back up and look at the original action, and to waitFor the value that you are trying to send in the second action, if a derived value is required.
So in this case you would respond only to 'auth' in both the UserStore and the RouteStore.