routes out of admin scope