Require package and add RESTful API route
CSRF token checking for ajax request
Add one-to-many relationship to models