update back-end controller and routes for location