added an access-rule macro helper for restricting routes