move controllers into api directory