Api principles (preliminary, very rough draft)

There's also the approach Google uses on some of their APIs, the `pagetoken` (see https://developers.google.com/places/documentation/search#PlaceSearchRequests).

I feel pagination data belongs to the body.