Strict auth role routing