changed API to use hyperlinked models
Added token auth to API