good thing no hackers read our commits

hehehehe

Locks down some baddd routes.
can `'edit'` be a constant somewhere?