pulling name from req.session, creating RESTful endpoints