api verify check

[jawndiego]

we should implement something like a JWT or express-session in order to verify the key once and pass a flag to our endpoints so we do not do redundant verify checks at each endpoint/route.