GET and POST routes for favorites