Fixed #268, a bug where protected endpoints became unprotected when setting protection on both group and route.

Signed-off-by: Jason Lewis <jason.lewis1991@gmail.com>