routing API currently in auth_server. please move to separate API supervisor