Add apikey check from request url.
Add base api key validatoor.
Add perms level to filter people's infos.
Move user naming to 'people' everywhere to keep consistency on 'people' wording.
Add request timestamp into JSON output.
Always return error in JSON output with same format.