initial implemntation of REST service API
uses custom random key generation code