notes controller and routes