moving routes to app.js for a second to get them to work