added more routes with no auth, this needs to be nicer @TODO
added setdemo @TODO make public routes better