restrict routes to only match actions that are available