root for any of the controllers returns all objects, demo purpose only. adjusted validation to loop over arrays when necc to check arrays, also same with sanitized hash