Updated routes to prevent direct access to users plugin