first pass at website-rest-api