move excess api shit out of controllers
footer stuff
api and ajax calls closes #6
secrets configured