first iteration of query api

details should be clear in `server/timeseries/views/data_api.py`