setting up api routes