added default allow routes list