Added api taster, removed csrf (lol), fleshed out api