Included note re: syncdb when using ApiKey model. Closes #909.
Fixes #884. Authorization for update should be only called once with a fully hydrated bundle
Fixes #850. Instead of using path to determin if we are dehydrating a list of resources or a single resource, we explicitly pass a boolean. This should also make writing tests easier as we no longer need to have path defined for requests.