add default route and AccessControl