refactor controllers and services to use single HepApi object for all API calls