Updated REST API

Endpoint now exposes all data through “scope” parameter

Updated internal data transform to blacklist internal fields