Update api and corresponding models

this needs to be represented as a filter  vs a code chunk like this. 

- if I request completion of 'apa', it needs to be is_private of bookmarks not by me, but include is_private=true of my own bookmarks.