moved api out of routes and renamed both to -http suffix.  tweaked server.js to reflect these new layouts