Backbone.js CRUD with auth