- regenerate .pot files
- update routes to not explicitly call out the controller to use
- clean up permission check