initial Backbone skeletons
locking down Rails API, requires authentication to create, requires author to destroy