Use _entity_access in routing