basic routes working; need to make them more defensive