finished basic api routes