use api provided paths for getting child resources
party pooper for post requests
creating incidents
add missing user attributes
ability to query for incident types
add forgotten incident type field to model