document validation policies for name and password fields
s/{CLIENTID}:{APIKEY}/:/
document http status codes, error responses
update CHANGELOG.md