Change default routes for push/pull
Restrict unauthenticated access to hooks only.