added authorization for route helper