starting work on api implementation; todo: figuring out authentication