Refactored: route.rb
Fixed: embed url needed authentication