restricting routes
fixing routes and validation controls