- Render error (permission_denied) instead of redirect
- Add `total', `page' and `per_page' fields into response
- Fix response to `/me' for requests with token