diff --git a/backend/routes/chat.routes.js b/backend/routes/chat.routes.js
index 5f3dd79..6e9b54a 100644
--- a/backend/routes/chat.routes.js
+++ b/backend/routes/chat.routes.js
@@ -6,9 +6,7 @@ import { validateMessage } from "../middleware/validation.middleware.js";
 
 const router = express.Router();
 
-router.get("/", getMessages);
-
-router.post("/", authenticateUser, sendMessage);
-router.post("/", validateMessage, sendMessage);
+router.get("/", authenticateUser, getMessages);
+router.post("/", authenticateUser, validateMessage, sendMessage);
 
 export default router;
\ No newline at end of file
diff --git a/backend/routes/tasks.routes.js b/backend/routes/tasks.routes.js
index 5e0c542..e600259 100644
--- a/backend/routes/tasks.routes.js
+++ b/backend/routes/tasks.routes.js
@@ -12,17 +12,10 @@ import { validateTask } from "../middleware/validation.middleware.js";
 
 const router = express.Router();
 
-router.get("/", getTasks);
-
-// Centralized protection for all task mutation routes
-router.use(authenticateUser);
-
-router.post("/", createTask);
-
-router.patch("/:id", updateTaskStatus);
-
-router.patch("/:id/edit", updateTask);
-
-router.delete("/:id", deleteTask);
+router.get("/", authenticateUser, getTasks);
+router.post("/", authenticateUser, validateTask, createTask);
+router.patch("/:id", authenticateUser, validateTask, updateTaskStatus);
+router.patch("/:id/edit", authenticateUser, validateTask, updateTask);
+router.delete("/:id", authenticateUser, deleteTask);
 
 export default router;
\ No newline at end of file