sets up rabl for api json definition
changes to support rabl
set format:json as the api default in routes
fixes rabl json for current_user
restricts user properties sent on login/register