finish HANDResource REST routes