Remove insecure page and add list allow function. Fix root path route.