clean up lint warnings
add collections url as attribute
add token only to backbone sync calls (not every ajax call)