Get rid of protect_form_forgery comment
Add user serializer
Use more semantic HTTP reponses