fix routing in server.js