securing routes and hooking root controller