Can precisely specify which relations are returned for requests (this will override relations specified by nestedRelations)
Created construct for user_id determined from successful token authentication.
Check user permissions (very basic permission check, will change to permission mask later) for REST actions, based on restrictions set in the controllers.
Added performance profiling for requests.