restrict REST endpoints to specific types
re-organize file tree