fixed routes and api access