moved to API folder
added authorization middleware
added support for hmac authorization in the API