add route/role checks