create serializer classes
create authorizer classes
add authority methods to model classes
put this in the right place