Add api_render method to base api controller

can now take any object and respond_with it according to
permitted_params for it