@1aurabrown => add some API routes

Removed the Authenticated API Provider as that's not the right route to go. 
Added stubbed data ( which I triple check ed for leakage, tokens and keys and my card details are fakes ) 

@AshFurrow - I standardised on _not_ having the `.` before the case statements. Pretty sure that was the outcome of our discussion before.
But the `endpointsClosure` would have to rely on globally-accessible, possibly-missing values. I think what you've got is the best solution we can have with the current API.