Adding POST endpoint tests, and fixing serializers to separate out read-only fields (created/modified)