set up basic api, need to incorporate auth prob