Started with API securing, see issue #3