NEW QueryHandler now applies default limit

use config max_records_limit or limit query param to override
API QueryHandler now checks for api_access config

DataObject should have api_access config enabled to be accessible via
the api. Se to true or a comma separated list of HTTP methods