Add REST CRUD operations on locations.

Fix createEvent so that it can properly be called from REST.
Design of how related entities are accessed and policies need to be defined (what happens when we try to create something that already exists, how are errors reported, etc.)