Http api

First pass wire up of (most) HTTP endpoints but without authentication.
Hmmm. Can you not delete the Hash key from the object instead? I guess not, since this is not Python. :-) I understand why we do this, I just wish there was a better way. Is there?