Security plugin fix: running authentication check beforeExecuteRoute to prevent predispatch loop.