Adding a new `is_protected` flag to the Route class
Making sure the controller initialization process
is done via a protected route instance, so the callbacks
don't get processed through route handlers and so forth