fix: routes & controller