dont transmit handler within payload don't use oauth to gen token -- jwt instead
document some api nodes with apidoc
modify api where necessary