make an API for pins index, show, and create
limit fields returned by JSON requests
implement API authorization