init module route security only after user model is ready