you still need to keep the check about the route being exposed before doing this