server: update route loading & access filtering functions