fixed a problem with secured flagged routes not honoring the flag values