Fix error msg, code.
Human-readable dates only.

Hid the weird date field.
ID should be int.

The API has a type tag for the ID parameter in the URL and it
automatically converts the string to an int.  The non-api endpoint didn't
do this and that masked a problem where I was comparing the int and
string versions of the ID for equality.
Actually guard() API Resources.

D'oh!  I can't believe I forgot to add this.  :-(