default to json for api requests
add current wink user to create and enforece permissions