added some new routes, polished up some existing ones to handle errors more gracefully/be more secure
woops didn't save
wrote the todo and some other stuff