API - Basic API calls

I think I will add something in the token function to return something else when the admin access level is defined, which would overwrite these checks.