Minimum viable API w/ authentication and permissions, CRUD and resource management