Finish JavaScript routing and implement role restrictions on server side