For the sitemap functionality we need to forbid the top level
route `sitemap` because it will be used later by our
controllers.