fixed route restrictions (before filters)