Add protected API service - WIP now placeholder - which is protected by the authroization server