controllers for #255 added,
+ security issue relative to news update fixed.
routes for #255 API endpoints added.