Added #render_error_json to forbid users not logged in from looking at JSON API
Added callbacks to forbid access to JSON API without being logged in