Features/preliminary api setup

The only thing I suspect might break it would be config/application.rb. The rack-cors configuration seems a bit too open. We may want to change this in the future, or play around with what's necessary.