Use routes for security paths, instead of raw paths
Fixed issues, thanks to @weaverryan
Merge pull request #2146 from WouterJ/fix_2108

Use routes for security paths, instead of raw paths