Start of trying to move server api somewhere testable
Added md5s to the locking

This is needed as we are not locking files, we are just locking
versions of files