join and leave REST endpoints + specs