added monster controller and schemas
adding back validation, fixed GET to get by id or list all