fixes #7496 - change has_and_belongs_to_many to has_many :through and add unique validation and auditing to join table
fixes #5780 - API v2 - RESTful way to add/remove many-to-many association one at a time rather than passing all id's