API User sign up and unauthorized responses

Fix #275 

Creates a session serializer to wrap a user object.

Fix #278