fleshing out REST API