secure post get api routes