v3 DataAPI ready for implementation except for one security hole

waiting to put in tracked code until that is fixed