put Field Sets in their own collection
validate schema's list of field sets
pull API parts in separate modules
first stabs at JWT-based authentication
some json/test data