okay first run at making an API for railsgoat
working on the auth structure for the API
added vulnerable auth check for the API
Merge pull request #95 from OWASP/cktricky_mar_2014_updates

Cktricky mar 2014 updates
some basic api functionality with a few gotchas
whew, now THAT is a huge tutorial explanation for a relatively simple issue!
added the verbose model attributes finding under the exposure section within the tutorials
making sure this is up to date
Merge branch 'master' of github.com:OWASP/railsgoat into pr-96
first round of tests look okay, now we can re-use this function :-)