modify api, remove to create id clientside, change id type to string
add testcode
remove id since it is created automatically, added secret and publicId
add some routes