I'm envisioning APIs that work only for logged-in users, to which you pass POST a food PK and it creates/deletes a watch for you?