add a single lift (api)
users contain references to their workouts, not the workouts themselves
simplifying validation
simplify login validation