set up some api routes for mobile app