add no sub route redirect, only check auth on upsert for dns