Good, this needs to be done for all routes so we restrict the possible api calls to those that match our spec