Restrict access of most JobApplication routes to HR Admin or Dept Manager