adding routes and access controller