Include User id in serialized object.
Only allow .list(), .retrieve(), and .update() methods on Account endpoints.
Add User endpoint with .create() and .destroy() methods.