still working on the auth, currently at the web service part
incomplete api stuff