basic REST interface; starting to add security
Rough outline for security.