Feature badges api

basic implementation of the Badges REST API. read-only. Currently, User resources have String-style badges stored. We should changes this to DBRef objects within the Mongo layer.