Locked down routes to only correct request method