Added a serializer and a spec.

We now have a passing user spec for the API and we have approprioate routes.
We also have a serializer to say what were getting back.