express/mongoose api mostly working/tested