Customisation of /api/auth/local

Hi

I read that I can override the login by adding

users-permissions
auth.js

I did this but it is not calling my code but rather the code in the node_modules

What am I doing wrong?