Fixed a wildcard in routes for catching unauthorized access.