explaining some security considerations
flagging all the create methods that should still be fleshed out
updated the create() to make sure we return an object with a Location to the new resource;
added some error handling to handle collisions;