Added routes and capabilities. Security can be handled at the route level or the more specific capability level.