Initial Api, with basic user authentication and secure db save