Scaffold User

...with first & last name, email, bio, fb id, google id, and auth token.

Important files to note:
db/migrate/...
app/models/...
config/routes.rb
Is there a way to select which fields actually get returned here, and which fields can be updated in update/create? We don't want to show them their google_id or facebook_id.

Some fields should be conditionally returned - email for instance might only be included if the user sending the request is the same as the user being asked for. We can deal with that later in the user service. But I think we should exclude the fields that are never exposed to the client though.