updated server.js with new route mappings