add OAuth to all API calls
Compress BasicApplication into Account object to be shared by client and server
simplify some rest api calls
move api key and secret to text files