finish up api endpoints