api approach

This doesn't need to be merged, it's more for conversation.

I've put some notes in a [markdown document](https://github.com/theodi/open-data-certificate/blob/api/api_approach.md) about the approach towards implementing the api.