added security to the route