simple locations api controller index endpoint, only allow index/show routes on api endpoints
Merge branch 'enhancements'