added REST controller, still in TODO status