✓ GET    /api/ping
✓ GET    /api/auth-token
✓ GET    /api/verify-auth                           -- returns 200 or 401 depend on validity of the provided auth
✓ GET    /api/projects                              -- return project summaries
- POST   /api/projects                              -- create a new project
* GET    /api/project/<proj-id>                     -- return detailed project record (include steps)
- GET    /api/project/<proj-id>/active              -- return detailed information about all currently running runs
✓ GET    /api/project/<proj-id>/versions            -- list the versions of this project that have been built
- GET    /api/project/<proj-id>/<step-id>           -- return detailed step information (include runs)
* POST   /api/project/<proj-id>/<step-id>/run/<ref> -- kick off a run
- GET    /api/project/<proj-id>/<step-id>/run/<ref> -- return detailed run information


Legend:
  ✓ implemented with passing tests
  * implemented, needs testing
  - not implemented