added the beginnings of an api
userpages now require POST data (still placeholder)
added temp "generateApiKey" method. api uses that to auth
api now checks to make sure the authd user and the requested user are friends
buffed the get quotes api
added api.md (documentation for the api)
the api key is now just based on time,  so it's pretty much impossible 2 people will ever have the same one
added an api page which displays the users key and let's them generate a new one
added a route to the api page
updated api.md