add api key and issue token class, moved specs around
add api-v1-events create route, processpayload no longer parses json
add api authentication layer to api