remove provides from all api routes, only allow appliation/json post and put requests to api
refactor controller tests for api changes
refactor model tests