added references table and associated, but still need to set up routes and force reference to belong to a specific user