cleaned up card controller and routes