20140806 realize restful api for actions PUT POST GET DELETE, including manipulating related (demo) models, Authentication and Authorization