tests for route restrictions