add api scope. login with POST /api/sessions. send request with userEmail and userToken (for cross domain requests)
Merge branch 'master' of github.com:secretBears/qapi-game