Added some permissions.
Change perm -> perms.
Remove main running ability of __init__.py.
Add sample data.

Fixes #3.
Change handler.py to api.py.

This change prevents naming issues.
Adds check for insecure method.