update routes in app.js