added API route in app.js