route SSE requests through app.router instead of every request filtering approach in sse.js
new SSE request processing gives 403 on forbidden single models too