Correcting misuse of `self` variables, minor optimization in `allows()`, changing context of route handlers such that `this` is the server