endpoints, mostly untested/need return jsons to match backend