added custom routes, but user db is f'ed again.
add status validations and tests