Update api and corresponding models

if username == requested_by, we don't need to filter on anything, as in that case, we would want both the private and the public bookmarks. We already get both public and private bookmarks by the above line of code, qry = qry.filter(Tag.bmark.any(username=username))