update example code
expand resources exposed in API. Implement custom authorization class for API.  Implement tests.