Added basic REST API (todo: user authentication)