forgot to make that endpoint public