added basic route restrictions