update route (missing req, res var)