app.js with route security filter integration
merge