moved router into app.js