Add API versioning and restrict responses to json

This change versions the mobile end-point API, making the web app able to turn security on.