corrected config routes to allow permissions for root URI