api: Cosmetics
api: forbid updates, creation and deletion of objects
api: only allowws GET requests
api: allow some filtering
api: add a view to get the user id, profile id and api key
api: use api_key authentication for everything (except login)