more concise REST routes in router.js to close #131