fix route security