added security for most routes