heroku
fixed js for player
restricting some routes