Make routes more meaningful

Routes mo'betta.

`/buckets` is now `/teams/1234`

- [x] update routes
- [x] security pass
- [x] integration test authorization (read/write access)
- [ ] refactor

Closes #11