Edit the resource request to use one endpoint

The resource controller then uses the include= of the query string to determine
which data to include and verifies the required scope was granted to the
access token provided.