Added instructions for deny all at end of routes