Make REST api running

Enitial capabilities including authorization and error response
with 401, 404, 405