secirity.yml routes fix