RE: multiple route objects and authorisation