Adds password/current as valid route