Should the gson instance be created here, so it is not not created on every request? Seems potentially bad.