My api always checks the validity of the token first and foremost and therefore always returns 401 even if the route does not exist, if the token is good it checks the route