added secure to route config