route security trimming and authentication