removed security for route