wip, securing api through voters and basic crud