Adding restricted routes and tests