Add a web api instead of direct calls to a database

[rk16449]

Instead of having direct database calls (security risk), change so that all calls are getting from HTTP requests