better security for server management routes