Add resource repository and basic conneg.
Disable CSRF to allow API inserts and updates.