changed enpoints, made more restfull. restricted acces for nit allowed actions