Player REST works now. Server's Player controller was mixing up Player's _id and User's _id. Now the Player model's load method takes a userId and queries for the Player profile by userId.