built api routes. Going to put login right in routes instead of controllers