fix bug that a required developer service was not included in user route
Refactoring: replaced similar ip check methods with a single method using a role parameter