add global metohod to_json, add allowed fields
fix unsecure arguments
add filter to get model
add object pk to api response
add suffix to field