TwoPicks API — see /api/* routes