44 securing api initial checkin

Initial check in of the api security is in