diff --git a/internal/routes/routes.go b/internal/routes/routes.go
index b0faf5d..ff3e55d 100644
--- a/internal/routes/routes.go
+++ b/internal/routes/routes.go
@@ -15,21 +15,18 @@ func RegisterRoutes(router *gin.Engine, userController *controllers.UserControll
 	router.POST("/users/login", userController.LoginHandler)
 	router.POST("/csp-report", middlewares.CSPReportHandling)
 
-	// create subrouter for teh authenticated area /account
-	// also pthprefix matches everything below /account
-	// accountRouter := router.PathPrefix("/account").Subrouter()
-	// accountRouter.Use(middlewares.AuthMiddleware)
-	//create api key required router
 	apiRouter := router.Group("/api")
+	apiRouter.Use(middlewares.APIKeyMiddleware())
 	{
 		router.POST("/v1/subscription", membershipcontroller.RegisterSubscription)
 	}
-	apiRouter.Use(middlewares.APIKeyMiddleware())
 
-	authRouter := router.Group("/users/backend")
+	authRouter := router.Group("/backend/users")
 	authRouter.Use(middlewares.AuthMiddleware())
 	{
-		authRouter.GET("/current-user", userController.CurrentUserHandler)
+		authRouter.GET("/current", userController.CurrentUserHandler)
 		authRouter.POST("/logout", userController.LogoutHandler)
+		authRouter.PATCH("/update", userController.UpdateHandler)
+
 	}
 }