Updates

* /api/items route is no need auth token
* `ids` filter for collections routes (#index)
* extends categories serializer
* adds tests