Configure allowed routes in an after initializer

Configure allowed routes in an after initializer so initializers that
depend on routes have a chance to initialize (i.e. Devise).
Bump version to 0.9.3