refactoring allow/deny code
refactoring API/RSS to use server-side router