enabled authorisation on content routes