entire api needs to be re-written to allow for access from client application