moved all json data calls to webapi controllers