Basic API in place

Authenticate, authorise and refund payment types work.
Ignore things in sandbox/public
Skip external tests unless --external