api routes all working