working on handler
remove csrf protection
added apns when a mob is created.  also, when it is shown (/mobs/1.json)