add /products GET and POST (refresh) endpoints