Updated fields and commented Slide and Submission models.
Tweaking authorization for API resources.
PATCH to a UserResource works, and only for the user who is logged in.