Full user authentication and authorization
has_many :through
Start to expose a JSON API