Make the user abilities more granular.
Add authentication filter for actions. Read mode remains `free for all`.
(fix) So were supposed to be using basic http auth, and it wasn't. Now it does.
Add all the logic for the Post endpoint.
Dirty conditional because cancancan basically sucks. Testing controllers with authorize! fails
with unauthorized request always. For this reason the conditional on Rails.env == "test"