flesh out api routes