Added first security & restriction to routes approach