first bit of /notes api