added API create and find, also added basic auth