move route api to /api/route; read route bounding box