api spec setup; mock access token
basic working queries with api key