remove attr_accessible from models; let grape do the work
add pay! and unpay! methods to Order
validate presence of order_id and gig_id in Reservation
use grape for api
update api urls in angular client