access set for all routes, image mangement

NOTE: new db update